9398 matches found
Blog Designer <= 1.8.10 - Unauthenticated Stored Cross-Site Scripting (XSS)
The Blog Designer WordPress plugin was affected by an Unauthenticated Stored Cross-Site Scripting XSS security vulnerability. Send POST request to: /wp-admin/admin-ajax.php?action=save&updated=true With request body: customcss=confirm1...
CVE-2019-11618
doorGets 7.0 has a default administrator credential vulnerability. A remote attacker can use this vulnerability to gain administrator privileges for the creation and modification of articles via an H0XZlT44FcN1j9LTdFc5XRXhlF30UaGe1g3cZY6i1K9 accesstoken in a uri=blog&action=index&controller=blog...
Zimbra Collaboration Suite ProxyServlet SSRF
Zimbra Collaboration Suite before 8.6 patch 13, 8.7.x before 8.7.11 patch 10, and 8.8.x before 8.8.10 patch 7 or 8.8.x before 8.8.11 patch 3 allows SSRF via the ProxyServlet component. Recent assessments: jrobles-r7 at May 09, 2019 5:57pm UTC reported: Details According to the blog post A Saga of...
Stealing Ethereum by Guessing Weak Private Keys
Someone is stealing millions of dollars worth of Ethereum by guessing users' private keys. Normally this should be impossible, but lots of keys seem to be very weak. Researchers are unsure how those weak keys are being generated and used. Their paper is here...
WordPress Print My Blog Plugin < 1.6.6 SSRF Vulnerability
The WordPress plugin Copyright C 2019 Greenbone Networks GmbH SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 2 of the...
CVE-2019-11565
Server Side Request Forgery SSRF exists in the Print My Blog plugin before 1.6.7 for WordPress via the site parameter...
Server side request forgery (ssrf)
Server Side Request Forgery SSRF exists in the Print My Blog plugin before 1.6.7 for WordPress via the site parameter...
CVE-2019-11565
Server Side Request Forgery SSRF exists in the Print My Blog plugin before 1.6.7 for WordPress via the site parameter...
CVE-2019-11565
Server Side Request Forgery SSRF exists in the Print My Blog plugin before 1.6.7 for WordPress via the site parameter...
CVE-2019-11565
Server Side Request Forgery SSRF exists in the Print My Blog plugin before 1.6.7 for WordPress via the site parameter...
CVE-2019-11565
CVE-2019-11565 : The WordPress plugin Print My Blog (before 1.6.7) is vulnerable to a Server Side Request Forgery (SSRF) via the site parameter. This affects the plugin's ability to perform requests to arbitrary internal/external resources, enabling an attacker to induce requests from the WordPre...
Hackers Found a Freaky New Way to Kill Your Car
Mueller report fallout, a biometrics database, and more of the week's top security news...
CVE-2019-11565: Server-Side Request Forgery (SSRF)
Server Side Request Forgery SSRF exists in the Print My Blog plugin before 1.6.7 for WordPress via the site parameter...
Print My Blog <= 1.6.5 - Unauthenticated Server Side Request Forgery (SSRF)
The Print My Blog – Print, PDF, & eBook Converter WordPress Plugin WordPress plugin was affected by an Unauthenticated Server Side Request Forgery SSRF security vulnerability...
PT-2019-12384
Name of the Vulnerable Software and Affected Versions Print My Blog plugin versions prior to 1.6.7 Description A Server Side Request Forgery SSRF issue exists, which can be exploited via the site parameter. Recommendations For versions prior to 1.6.7, update to version 1.6.7 or later to resolve t...
WordPress Print My Blog plugin <= 1.6.5 - Unauthenticated Server Side Request Forgery (SSRF) vulnerability
Unauthenticated Server Side Request Forgery SSRF vulnerability found by Magnus K. Stubman in WordPress Print My Blog plugin versions = 1.6.5. Solution Update the WordPress Print My Blog plugin to the latest available version at least 1.6.6...
14 Mueller Report Takeaways You Might Have Missed
When you dig into the Mueller report, a lot of important details start to jump out...
CVE-2017-18366
Subrion CMS 4.1.5 has CSRF in blog/delete/...